Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: 8Xm0mmolrMnWCoCg3EpGzWJ82NabjwPOSiQx1L/s97s=
Subject key identifier: DD:7D:A9:1E:F9:FE:3D:55:84:E4:74:E8:B3:1F:FE:0D:A8:96:D3:A3
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 01A06D94D1AA2577A44BAA0BB5092DEF771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0BBB
Signing time: Fri 04 Sep 2026 18:01:04 +0000
Manifest this update: Fri 04 Sep 2026 18:01:04 +0000
Manifest next update: Sat 05 Sep 2026 18:01:04 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: t3sS5OEJUQ+hG5MbjXI7bl+CF+hspPCqAi1e01MBv64=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:d1:aa:25:77:a4:4b:aa:0b:b5:09:2d:ef:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Sep 4 18:01:04 2026 GMT
Not After : Sep 5 18:01:04 2026 GMT
Subject: CN=dd7da91ef9fe3d5584e474e8b31ffe0da896d3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:ed:b8:3c:17:7c:06:89:fd:e9:e3:ec:ca:
f4:17:20:55:8d:35:2c:b7:7d:a1:ce:bd:38:b9:c6:
bc:99:29:75:67:f5:34:7b:4e:28:02:88:e7:2e:7e:
4c:3e:d8:e6:d4:1b:c2:fe:74:72:3a:ca:30:a6:fc:
94:30:59:3f:75:c3:5a:b3:87:b8:b0:b3:43:1f:6f:
15:8b:fe:29:ce:3a:77:9c:0f:f4:de:18:9d:43:be:
d2:42:d1:33:c5:23:84:bc:09:d3:0f:93:18:d4:91:
2c:59:af:9a:fe:3c:5e:cb:d8:95:d7:da:60:55:e2:
5c:ef:f9:ff:01:4e:97:23:20:37:30:6f:f2:65:a3:
26:01:95:a4:da:5c:a5:19:cc:f2:cc:1d:3a:10:47:
69:d2:f1:34:c9:be:c9:28:a0:cd:4b:db:65:fe:06:
3f:8c:14:81:69:1b:7d:2a:a4:2b:e4:87:02:c5:1e:
22:7e:4a:4f:14:b4:13:43:7e:f9:5b:11:e6:77:ce:
0e:3c:b8:62:76:d1:45:50:ac:16:8a:d0:a5:05:2f:
39:85:c8:45:25:05:8f:3b:a2:c9:69:db:1d:5f:7b:
5e:17:5f:47:0b:c8:43:4b:dc:07:79:da:fd:86:a3:
fe:d2:1e:21:2c:60:f8:fc:8d:6a:57:78:82:c3:91:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:A9:1E:F9:FE:3D:55:84:E4:74:E8:B3:1F:FE:0D:A8:96:D3:A3
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:29:46:31:48:9d:48:8e:df:ea:1f:15:87:b9:33:69:2a:
d2:4e:e0:1f:28:b2:27:7a:65:84:c5:41:ad:1f:18:53:39:03:
39:d5:98:df:46:f0:ce:ab:1d:3e:ca:14:2c:09:eb:2a:89:f2:
79:21:c9:f2:c0:70:5b:1e:f3:2e:ab:e6:9c:e3:0c:9d:6a:a0:
cb:bd:b6:39:0a:f0:82:65:70:96:6e:6c:28:35:2d:df:d7:f8:
6c:63:8b:96:6a:bf:ab:18:4c:e6:fa:b2:a2:f0:9e:53:1d:7d:
3d:18:6b:29:04:0c:be:e8:8f:64:ba:e5:67:15:c9:8d:26:c6:
ca:8a:3b:1b:af:0a:09:be:ee:9f:2c:36:b0:f8:0a:27:d1:25:
ff:a6:99:1e:88:c1:db:e1:b3:45:ef:e0:fd:fa:17:69:f1:9e:
c1:3d:7f:3c:b0:83:4a:b1:6c:67:46:ee:68:c3:49:c1:ee:cf:
9d:29:ed:35:3c:1a:73:7b:af:dd:dc:df:00:d6:b4:60:f6:38:
f4:8c:11:41:f7:e3:d2:8c:f9:c0:a2:c8:30:5a:c9:68:40:87:
da:c6:eb:69:53:82:4a:bd:21:a3:ca:58:18:b1:b3:65:11:61:
2d:d2:1b:f5:d8:f9:20:d8:b3:57:34:54:13:1e:ef:27:0f:d4:
bb:9d:b5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlNGqJXekS6oLtQkt73ceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMmQ2NWFiYmM3ZWYwMDUxMjcyODg0NDQ3OTJhYjg2ZmIx
NWMyZWUwHhcNMjYwOTA0MTgwMTA0WhcNMjYwOTA1MTgwMTA0WjAzMTEwLwYDVQQD
EyhkZDdkYTkxZWY5ZmUzZDU1ODRlNDc0ZThiMzFmZmUwZGE4OTZkM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokftuDwXfAaJ/enj7Mr0FyBVjTUs
t32hzr04uca8mSl1Z/U0e04oAojnLn5MPtjm1BvC/nRyOsowpvyUMFk/dcNas4e4
sLNDH28Vi/4pzjp3nA/03hidQ77SQtEzxSOEvAnTD5MY1JEsWa+a/jxey9iV19pg
VeJc7/n/AU6XIyA3MG/yZaMmAZWk2lylGczyzB06EEdp0vE0yb7JKKDNS9tl/gY/
jBSBaRt9KqQr5IcCxR4ifkpPFLQTQ375WxHmd84OPLhidtFFUKwWitClBS85hchF
JQWPO6LJadsdX3teF19HC8hDS9wHedr9hqP+0h4hLGD4/I1qV3iCw5FgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN19qR75/j1VhOR06LMf/g2oltOjMB8GA1UdIwQY
MBaAFBEtZau8fvAFEnKIREeSq4b7FcLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2Yt
NjM2ODU3ZWUxNzkyLzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2YtNjM2ODU3ZWUxNzky
LzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmopRjFI
nUiO3+ofFYe5M2kq0k7gHyiyJ3plhMVBrR8YUzkDOdWY30bwzqsdPsoULAnrKony
eSHJ8sBwWx7zLqvmnOMMnWqgy722OQrwgmVwlm5sKDUt39f4bGOLlmq/qxhM5vqy
ovCeUx19PRhrKQQMvuiPZLrlZxXJjSbGyoo7G68KCb7unyw2sPgKJ9El/6aZHojB
2+GzRe/g/foXafGewT1/PLCDSrFsZ0buaMNJwe7PnSntNTwac3uv3dzfANa0YPY4
9IwRQffj0oz5wKLIMFrJaECH2sbraVOCSr0ho8pYGLGzZRFhLdIb9dj5INizVzRU
Ex7vJw/Uu521pw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:57 2026 by rpki-client